diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ae78c23..0789fb9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -41,6 +41,6 @@ jobs:
             registry.npmjs.org:443
 
       - name: Build and test
-        uses: myrotvorets/composite-actions/build-test-nodejs@cecb96664cb67f063d11aedb7456874eda7e9028
+        uses: myrotvorets/composite-actions/build-test-nodejs@b2ee801d40bc37c1303783f99e1fce35fc33bd52
         with:
           node-version: ${{ matrix.node.version }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index f6e25be..31af4c7 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -36,7 +36,7 @@ jobs:
             registry.npmjs.org:443
 
       - name: Run code style check
-        uses: myrotvorets/composite-actions/node-run-script@cecb96664cb67f063d11aedb7456874eda7e9028
+        uses: myrotvorets/composite-actions/node-run-script@b2ee801d40bc37c1303783f99e1fce35fc33bd52
         with:
           script: lint
 
@@ -59,6 +59,6 @@ jobs:
             registry.npmjs.org:443
 
       - name: Run type check
-        uses: myrotvorets/composite-actions/node-run-script@cecb96664cb67f063d11aedb7456874eda7e9028
+        uses: myrotvorets/composite-actions/node-run-script@b2ee801d40bc37c1303783f99e1fce35fc33bd52
         with:
           script: typecheck
diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml
index 033b42e..5f4afdf 100644
--- a/.github/workflows/npm-publish.yml
+++ b/.github/workflows/npm-publish.yml
@@ -39,7 +39,7 @@ jobs:
             registry.npmjs.org:443
 
       - name: Prepare source
-        uses: myrotvorets/composite-actions/node-prepublish@cecb96664cb67f063d11aedb7456874eda7e9028
+        uses: myrotvorets/composite-actions/node-prepublish@b2ee801d40bc37c1303783f99e1fce35fc33bd52
 
   publish:
     name: Publish package (${{ matrix.registry }})
@@ -79,7 +79,7 @@ jobs:
             npm.pkg.github.com:443
 
       - name: Publish package
-        uses: myrotvorets/composite-actions/node-publish@cecb96664cb67f063d11aedb7456874eda7e9028
+        uses: myrotvorets/composite-actions/node-publish@b2ee801d40bc37c1303783f99e1fce35fc33bd52
         with:
           node-auth-token: ${{ secrets[matrix.secret] }}
           registry-url: ${{ matrix.registry_url }}
diff --git a/.github/workflows/package-audit.yml b/.github/workflows/package-audit.yml
index bb3f9e4..3855605 100644
--- a/.github/workflows/package-audit.yml
+++ b/.github/workflows/package-audit.yml
@@ -30,4 +30,4 @@ jobs:
             registry.npmjs.org:443
 
       - name: Audit with NPM
-        uses: myrotvorets/composite-actions/node-package-audit@cecb96664cb67f063d11aedb7456874eda7e9028
+        uses: myrotvorets/composite-actions/node-package-audit@b2ee801d40bc37c1303783f99e1fce35fc33bd52
diff --git a/.github/workflows/push-tag.yml b/.github/workflows/push-tag.yml
index 6fc7964..ba77ad6 100644
--- a/.github/workflows/push-tag.yml
+++ b/.github/workflows/push-tag.yml
@@ -34,7 +34,7 @@ jobs:
             registry.npmjs.org:443
 
       - name: Build and test
-        uses: myrotvorets/composite-actions/build-test-nodejs@cecb96664cb67f063d11aedb7456874eda7e9028
+        uses: myrotvorets/composite-actions/build-test-nodejs@b2ee801d40bc37c1303783f99e1fce35fc33bd52
 
   release:
     name: Prepare the release
diff --git a/.github/workflows/sonarscan.yml b/.github/workflows/sonarscan.yml
index 1f90322..f723a9c 100644
--- a/.github/workflows/sonarscan.yml
+++ b/.github/workflows/sonarscan.yml
@@ -30,6 +30,7 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             api.github.com:443
+            binaries.sonarsource.com:443
             github.com:443
             npm.pkg.github.com:443
             objects.githubusercontent.com:443
@@ -41,7 +42,7 @@ jobs:
             sonarcloud.io:443
 
       - name: Run SonarCloud analysis
-        uses: myrotvorets/composite-actions/node-sonarscan@cecb96664cb67f063d11aedb7456874eda7e9028
+        uses: myrotvorets/composite-actions/node-sonarscan@b2ee801d40bc37c1303783f99e1fce35fc33bd52
         with:
           sonar-token: ${{ secrets.SONAR_TOKEN }}
           test-script: 'test:sonarqube'